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1  Executive  Overview 


Information  is  now  often  referred  to  as  the  fourth  element  of  power  and  has  thus  become 
an  important  key  to  our  national  security.  This  strategic  plan  provides  a  roadmap  for  reahzing 
more  efficient  and  effective  mission  support  for  ARL  to  AMC,  the  Army,  and  DoD.  ARL  has 
identified  this  as  building  a  “World  Class  Infrastmcture.”  The  execution  of  this  plan  requires 
leadership  and  commitment  to  work  toward  our  common  goals.  This  ARL  Strategic  Information 
Plan  does  not  address  specific  programs  or  budgets.  It  serves  as  a  framework  for  the 
development  of  more  detailed  plans  that  identify  specific  programs  and  initiatives  and  relate 
them  back  to  the  overall  ARL  mission.  It  is  in  this  context  that  an  Enterprise  Resource  Planning 
(ERP)  project  has  been  identified  and  is  being  proposed.  An  ERP  can  incorporate  business 
inteUigence,  knowledge  management,  and  information  sharing.  Ultimately  an  ERP  could  greatly 
assist  ARE  in  measuring  progress  toward  the  goals  addressed  in  this  strategic  plan,  and  support 
the  ARE  Corporate  Vision  of  “one  ARE”,  and  the  ARE  CIO  Vision  of  making  information  and 
decision  superiority  a  reahty  for  ARE.  This  plan  provides  a  roadmap  for  pursuing  significant 
improvements  well  into  the  next  decade.  However,  the  execution  of  this  plan  requires 
commitment  to  work  together  toward  our  common  goals  and  achieving  the  vision  of  “one  ARE”. 

This  strategic  information  plan  comphes  with  the  Clinger- Cohen  Act  (CCA)  of  1996 
(formerly  the  Information  Technology  Management  Reform  Act  of  1996)  and  the  Government 
Performance  and  Results  Act  (GPRA),  Paperwork  Reduction  Act  (PRA),  and  other  Office  of 
Management  and  Budget  (0MB)  mandates  and  guidelines,  and  AR  25- 1,  Army  Information 
Management,  as  well  as  the  1999  DoD  IM  Strategic  Plan  version  2.0  and  the  AMC  IT  Strategic 
Plan  version  1 .0.  This  body  of  laws  and  regulations  has  provided  the  opportunity  to  move  from 
budget  and  acquisition  centric  decision  making  to  mission,  architecture,  service,  and 
performance  based  decision-making. 

The  plan  provides  overall  ARE  guidance  for  managing  information  resources  and 
estabhshes  the  ARE  goals  and  objectives,  and  strategies  for  accomphshing  the  goals.  The  ARE 
Strategic  Information  Plan  supports  the  goals  of  DoD,  DA,  and  Headquarters  AMC,  as  well  as 
Joint  Vision  2010,  2020  and  the  ARE  Common  Operating  Environment  (COE).  The  plan  fulfills 
the  strategic  planning  requirements  of  the  PRA  of  1995,  as  amended,  0MB  Circular  A- 130,  and 
HQ  AMC  guidance. 

Subdivision  E  of  the  Clinger- Cohen  Act  mandates  that  we  improve  our  day-to-day 
mission  processes  and  properly  use  IT  to  support  those  improvements.  Technology  as  an  enabler 
of  reform  must  be  fielded  orderly,  promptly,  and  efficiently.  We  must  use  streamlined 
acquisition  processes,  commercial  off-the-shelf  (COTS)  products  and  services,  outsourcing,  and 
partnering,  as  appropriate,  to  take  advantage  of  industry  capabihties.  The  IT  investment 
portfolio  concept,  as  put  forth  in  CCA,  emphasizes  the  need  to  do  a  better  job  of  prioritizing  IT 
capital  investments  and  being  accountable  for  results.  Accountabihty  extends  from  the 
individual  to  the  mission  commanders  and  the  Congress.  Keeping  our  mihtary  and  civUian 
workforce  trained  in  new  technologies  and  improved  processes  is  critical  to  maintaining  our 
fighting  edge  and  achieving  savings.  EinaUy,  aU  this  is  in  vain  if  our  information  is  not 
protected. 
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2  Introduction 


2.1  Purpose 

During  the  ongoing  process  of  personnel  draw  down  it  is  necessary  to  preserve  as  much 
of  the  workforce  responsible  for  delivering  the  ARL  Research  and  Development  product  as 
possible.  That  means  that  the  support  staff  is  where  most  of  the  cuts  must  be  taken.  However,  by 
cutting  the  support  staff,  there  is  a  danger  of  reducing  the  support  to  the  Scientific  and 
Engineering  (S&E)  staff  to  the  point  where  the  overall  effectiveness  of  the  organization  suffers. 

The  solution  is  to  find  ways  to  perform  the  support  functions  more  efficiently  with  fewer  people. 
We  are  seeking  rehef  from  overly  burdensome  regulations  and  pohcies;  however,  we  also  need 
to  look  inward  to  identify  those  local  pohcies  and  procedures  that  are  outdated,  outmoded, 
irrelevant,  or  inefficient.  Our  goal  is  to  produce  ""one,  united  Army  Research  Laboratory  with 
standard  business  practices,  concentrated  teamwork,  and  less  bureaucracy  supported  by  a 
corporate  information  management  environment  where  personnel,  financial,  accounting, 
acquisition,  and  material  functions  operate  uniformly  throughout  ARL" .  See  ARL  Business 
Process  Re-Engineering 

The  purpose  of  the  ARL  Strategic  Information  Plan  is  to: 

•  Enable  the  execution  of  the  Research  &  Development  mission 

•  Provide  world  class  support  to  ah  our  customers 

•  Ensure  constant  process  improvement 

•  Protect  information 

•  Provide  appropriate  access  to  information 

•  Share  information 

•  Ensure  wise  investment  of  financial  and  human  resources 

As  these  happen  the  Vision  of  “One  ARL”  wiU  emerge  where  business  process 
enhancement  tools  such  as  workflow  management,  knowledge  management,  portals  and 
eBusiness  solutions  wiU  provide  direct  and  measurable  benefits  to  the  ARL  user.  There  wiU  be 
immediate  and  effective  electronic  access  to  the  information  warehouse  that  constitutes  ARL's 
intellectual  property  along  with  emerging  capabhities  that  aUow  integrated  voice,  data,  and  video 
over  the  same  network  medium. 

2.2  Scope 

The  ARL  Strategic  Information  Plan  applies  to  ah  ARL  organizations,  ARL  contractors,  and 
ARL  tenants  on  other  instaUations.  The  main  objective  is  to  promote  the  “one  ARL”  vision,  and 
at  the  same  time  move  forward  to  obtain  the  overall  goal  of  “World  Class  Infrastmcture  for 
ARL”.  To  remain  useful,  this  strategic  plan  must  undergo  periodic  revisions  and  updates  to 
remain  current  with  AMC,  DA,  DoD,  and  other  guidance  and  mandates,  and  to  ensure  we  remain 
focused  on  our  overall  World  Class  vision  for  the  Army  Research  Laboratory. 
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3  ARL  Information  Vision  for  the  Future  -  A  World  Class  Infrastructure 


In  order  to  achieve  our  vision  of  the  future,  we  must  first  understand  the  meaning  of 
world-class  infrastmcture.  A  world-class  infrastmcture  encompasses  two  complementary 
factors,  State-of-the- Art  Technologies  and  the  Best  of  Breed  Information  Technology  Practices. 

State-of-the-Art  Technologies  include: 

1.  World  Class  Communications  Infrastructure  -  M^- speed  secure  access  to  all 
ARL  resources  from  the  office,  home,  telecommuting  centers,  and  travel 
locations. 

2.  Continuous  Operations  -  Every  year  an  additional  “9”  must  be  added  to  today’s 
99.99%  availabihty  rate  for  an  organization  to  remain  world  class. 

3.  World  Class  Support  -  24x7  support  of  the  entire  ARL  computing  infrastmcture. 
This  includes  network  monitoring,  maintenance  of  infrastmcture  documentation, 
communications,  security,  help  desk,  software  distribution,  and  hardware  and 
software  inventory. 

4.  Office  of  the  Future  -  The  collaborative  office  of  the  future  allows  universal, 
multimedia,  electronic  interaction  throughout  ARL. 

The  second  part  of  world-class  infrastmcture.  Best  of  Breed  IT  Practices,  includes 
the  following: 

1 .  Network  Administration  -  the  use  of  metrics  to  quantify  system  and  staff 
performance  to  identify  issues  and  to  trigger  remedial  action  before  problems 
arise. 

2.  Technology  Planning  -  planned  and  controlled  technology  monitoring  and 
refreshment  integrates  proven  leading  edge  technologies  into  the  everyday 
infrastmcture. 

3.  Continuous  Upgrades  -  technology  upgrade  plans  enable  continuous  upgrading 
of  hardware  and  software. 

4.  Disaster  Planning  -  encourages  participants  to  anticipate  contingencies  and 
develop  procedures  to  prevent  or  mitigate  consequences  of  system  or  process 
failures. 

5.  Documentation  -  comprehensive  and  thorough  documentation  permits  definition 
and  control  of  the  architectural  topography  and  sound  inventory  management. 

6.  Training  -  training  plans  provide  ongoing  training  for  users  in  the  features  of 
existing  collaborative  tools  and  desktop  apphcations  to  enable  them  to  get  the 
maximum  benefits  from  ARL  investments. 

Thirteen  components  comprise  the  infrastmcture.  These  components  can  be  viewed  as 
the  building  blocks  in  creating  the  world  class  infrastmcture: 

1.  Voice  communications 

2.  Video  communications 

3.  Radio,  wireless  and  sateUite  communications 

4.  Data  communication 

5.  Desktop  computer  support 

6.  Management  and  business  apphcations 

7 .  Library  and  knowledge  management 
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8 .  Visual  production  (graphics  and  publications) 

9.  Records  and  document  management 

10.  Information  technology  management 

1 1 .  Information  plans  and  policies 

12.  Facihties  and  space 

13.  People  -  trained  and  productive 

Our  strategy  is  to  deploy  the  new  technologies  in  two  steps;  first,  testing  and 
confirmation  within  one  ARL  Directorate,  followed  by  ARL-wide  deployment  if  found  to  be 
successful.  The  goal  of  the  world-class  infrastmcture  is  to  provide  maximum  support  to  the  ARL 
user  in  the  most  effective  and  efficient  manner  possible. 
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4  ARL  IT  Strategic  Direction 
for  the  21st  Century 


4.1  Mission  and  Vision 

The  mission  and  vision  for  information  management  have  a  strong  hnk  to  supporting  the 
corporate  mission  and  vision  of  ARL. 


ARL  Corporate  Mission 


Execute  fundamental  and  applied  research  to  provide  the  Army 
the  key  technologies  and  the  analytical  support  necessary  to 
assure  supremacy  in  future  land  warfare. 


ARL  Corporate  Vision 
ARL  "One  Laboratory"  Vision: 

•  America's  Laboratory  for  the  Army 

•  Providing  materiel  readiness  through  innovative  technology 


CIO  IT  Mission 

Establish  knowledge  management  policy,  provide  guidance  and 
oversight,  and  leverage  technology,  which  foster  information 
superiority  for  the  war  fighter  and  maintain  and  strengthen 
national  security.  Provide  information  accessibility,  accuracy  and 
reliability  for  the  Army  Research  Labs  responsive  to  business 
needs  and  safe  from  compromise  to  promote  a  "one  laboratory" 

approach. 


CIO  Vision 

Make  information  superiority  a  reality  for  the  Army  Research 
Labs  through  knowledge  management. 
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4.2  Strategic  Information  Planning  Goals 


Six  goals  characterize  fundamental  ARL  eritieal  suceess  faetors  for  IT  to  realize  the 
vision.  These  goals  have  been  derived  from  the  DOD  IM  Goals  as  mandated  with  specific  focus 
on  the  needs  and  unique  roles  and  responsibilities  of  a  basic  research  and  development 

laboratory.  Goal  1  grounds  IT  in  our  national  defense  mission  using  joint  mission  planning  and 
analysis  processes  as  the  basis  for  defining  information  service  and  performance  requirements. 
R&D  is  basie  to  our  long-term  abihty  to  maintain  our  national  defense  seeond  to  none.  Goal  2 
responds  to  management  direetion  and  mission  requirements  by  dehveiing  quahty,  affordable 
world-elass  produets  and  serviees  to  our  R&D  IM/IT  eustomers.  Goal  3  emphasizes  the 
management  proeess  improvements  that  are  needed  to  more  effeetively  deliver  quahty 
information  and  services  to  ARL  R&D  mission  eustomers.  Goal  4  refieets  the  pervasive  impaet 
of  significant  R&D  role  in  information  assurance  on  ARL/AMC/DoD.  Goal  5  places  emphasis 
on  the  leveraging  of  eoUeetive  wisdom  to  inerease  responsiveness  and  innovation  within  ARL  to 
allow  ARL  to  position  itself  as  the  AMC,  DA,  and  DOD  Knowledge  Management  (KM)  experts. 
Goal  6  enforces  the  sharing  of  information  to  accomphsh  the  ARL  corporate  vision.  The 
objeetives  and  strategies  assoeiated  with  the  goals  are  organized  logieaUy  but  are  intended  to  be 
implemented  in  paraUel  to  make  rapid  progress  toward  reaching  the  goals. 

These  goals  also  have  a  strong  tie  to  the  goals  of  the  AMC  IT  Strategic  Plan.  Although 
ARL  is  a  research  and  development  laboratory,  the  role  of  IT  bears  some  similarity  to  AMC 


AMC  Strategic  Goals 

ARL  Strategic  IT  Goals 

Improve  Information  Quality 

Promote  Effective  Use 

Promote  User  Accessibility 

Improve  the  IM  Process 

Improve  the  IT  Environment 

Reduce  Costs 

Improve  Security 

1 

Remain  a  mission  partner 

X 

X 

X 

2 

Provide  services  that  satisfy 
customer  information  needs 

X 

X 

X 

X 

X 

X 

X 

3 

Reform  IT  Management 
Processes  to  Increase 

Efficiency  and  Mission 
Contribution 

X 

X 

X 

X 

X 

4 

Ensure  AMC/DA/DoD's  Vital 

Information  Resources  are 
Secure  and  Protected 

X 

X 

5 

Showcase  Knowledge 
Management  Research  and 
Potential 

X 

X 

X 

X 

6 

Use  Information  Sharing  as  a 
Vehicle  to  Accomplish  the 
"One  ARL"  Vision 

X 

X 

X 

X 

X 
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headquarters.  The  vision  of  ARL  to  obtain  a  world-class  infrastructure,  and  the  goals  and 
objectives  to  achieve  this  vision,  are  associated  with  the  AMC  strategic  goals  as  identified  in  the 
current  strategic  plan  in  the  adjacent  matrix. 
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4.3  Goals 


Description:  JV2010  recognizes  information  superiority  as  the  enabler  for  fuU  spectmm 
dominance  in  the  21’^'  century  and  JV2020  reinforces  those  goals.  Overall,  ARL  must  leverage 
information  resources  and  technology  to  improve  the  performance  of  its  mission  while  realizing 
major  efficiencies  in  how  we  conduct  our  business  functions.  Mission  processes,  information 
uses  and  services  must  be  clearly  understood  and  communicated  to  all  employees  in  order  to 
drive  IT  planning  and  resource  decisions.  The  link  from  doctrine,  strategy,  goals,  measures,  and 
architectures  to  IT  must  be  clear  and  compelling. 

ARL  must  focus  on  the  customer’s  needs  in  relationship  to  Knowledge  Management, 
Information  Assurance,  and  Information  Warfare  to  improve  their  Research  and  Development 
efforts  in  support  of  JV2010,  JV2020  and  the  Army  Objective  Force  Structure.  Relationships 
with  military  commanders  and  functional  managers  must  remain  strong  to  assist  with 
formulating  strategic  plans  that  capitalize  on  the  potential  of  information  technology  to 
revolutionize  mUitary,  logistic  and  business  affairs  to  align  IT  with  the  mission. 

This  strategy  envisions  an  assessment  and  analysis  process  that  addresses  all  elements  of 
military  capability  hohsticaUy  from  an  ARL/AMC/Defense-wide  perspective  leading  to  capstone 
requirements  documents  that  apply  operational  architectures  to  define  tasks  and  information 
exchange  requirements.  This  strategy  requires  linking  the  JV2010  information  superiority 
implementation  process,  the  Joint  War  fighting  Capabihties  Assessment  (JWCA)  process,  and 
customer  processes  to  provide  an  integrated  set  of  desired  operational  FT  capabihties  and  the 
adequacy  of  programs  and  initiatives  to  meet  the  FT  need. 

Objective  1.1  Identify  Mission  Needs  and  Align  Information  Technology  (IT) 

Strategy  1.1.1  Influence  strategic  planning  and  align  IT  strategically  to  mission  plans. 
Promote  strategic  planning  as  the  basis  for  investing  in  FT.  Strengthen  coUaborative 
relahonships  with  mhitary  commanders  and  functional  managers  to  help  them  formulate 
strategic  plans  that  capitalize  on  the  potential  of  FT  to  revolutionize  mhitary,  logistic  and 
business  affairs.  This  strategy  envisions  having  functional  strategic  plans  with  goals  and 
performance  measures  for  all  ARL  functional  areas  to  improve  program  planning  and  as  a 
basis  for  ahgning  FT  with  the  mission  by  2003. 

Strategy  1.1.2  Promote  and  institutionalize  methods  to  improve  mission  processes. 
Using  business  process  improvement  disciplines  to  rigorously  analyze  mission  area 
processes  and  relate  those  to  strategic  goals  and  measures  of  performance  for  the  mission 
recognizes  major  improvements.  Integrating  processes  across  current  stovepipes 
recognizes  order  of  magnitude  improvements.  The  initial  target  is  to  get  a  core  set  of 
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consistent  process  models  for  all  functional  areas  and  activities  necessary  to  analyze 
opportunities  and  select  those  with  the  highest  payoff.  This  strategy  requires  estabhshing 
pohcies  for  conducting  business  consistently  across  all  mission  and  mission  support 
domains  by  2002.  ARL  must  have  a  comprehensive  plan  for  reengineering  its  functions 
before  investing  in  IT. 

Objective  1.2  Forge  Effective  Partnerships  with  Customers 

Strategy  1.2.1  Promote  organization  structures  for  effective  partnering.  The  ultimate 
responsibihty  for  managing  processes,  investing  in  IT,  and  assessing  the  contribution  of  IT 
to  the  mission  rests  with  commanders,  process  owners  and  tine  managers.  This  strategy 
requires  positioning  IT  to  influence  key  functional  decisions  by  designing  organizational 
stmctures  to  ensure  functional  and  Information  Management  (IM)  responsibilities  are 
effectively  executed  and  aligned  at  all  levels.  Existing  management  stmctures  need  to  be 
assessed  in  the  light  of  GPRA,  Chief  Financial  Officer  (CFO),  Paperwork  Reduction  Act 
(PRA)  and  CCA  mandates.  This  strategy  can  be  accomplished  by  continuous, 
comprehensive,  top-level  review  of  IT  management  stmctures  by  the  CIO  at  least  annually. 

Strategy  1.2.2  Educate  customers  on  IT  and  communicate  the  IT  mission.  Customers 
need  to  have  sufficient  knowledge  of  IT  as  it  impacts  their  mission  to  make  informed 
decisions  about  what  IT  they  need.  Effective  communication  must  be  in  the  user’s 
language,  not  in  technical  jargon.  This  strategy  requires  increased  emphasis  on  educating 
users  about  TT’s  potential  for  improving  mission  performance,  how  to  effectively  work  with 
the  IM  community,  and  how  to  get  the  most  from  IT  investments  in  place  by  2003. 

Strategy  1.2.3  Obtain  customer  feedback  at  all  levels.  Understanding  and  acting  on 
customer  feedback  is  essential  in  forging  and  maintaining  effective  partnerships.  Senior 
leadership  must  interact  with  the  customers  to  understand  and  respond  to  needs  and 
concerns.  This  strategy  must  also  extend  through  aU  levels  of  the  community,  with 
mechanisms  in  place  to  survey  customer  satisfaction  and  needs.  Customer  interaction  must 
be  a  key  influence  on  strategic  plans,  business,  and  day-to-day  service  and  information 
delivery  by  2002. 
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World  Class  Infrastructure  Com 

ponents 

Goals,  Objectives  &  Strategies 

Voice  communications 

Video  communications 

Radio,  wireless  and  satellite  communications 

Data  communication 

Desktop  computer  support 

Management  and  business  applications 

Library  and  knowledge  management 

s' 

o’ 

9 

C 

s 

s 

r 

c 

a 

T 

e 

r 

V. 

& 

£ 

Records  and  document  management 

WT*1  l.»  /O,.  , 

Information  technology  management 

Information  plans  and  policies 

Facilities  and  space 

People  -  trained  and  productiye 

1 

Remain  a  mission  partner 

1.1  Identify  Mission  Needs  and  Align 

Information  Technology 

• 

O 

• 

• 

• 

1.1.1  Influence  strategic  planning  and  align  IT 
strategically  to  mission  plans 

o 

• 

• 

• 

1.1.2  Promote  and  institutionalize  methods  to 

improve  mission  nrocesses 

• 

• 

• 

1.2  Forge  Effective  Partnerships  with  Customers 

• 

o 

O 

• 

• 

1.2.1  Promote  organization  structures  for 
effective  partnering 

o 

CD 

• 

• 

1.2.2  Educate  customers  on  IM  and 

communicate  the  IM  mission 

o 

1.2.3  Obtain  customer  feedback  at  all  levels 

• 

Key: 

• 

Major  relationship 

O 

Minor  relationship 

Description:  To  accomplish  its  mission,  ARL  must  focus  the  information  infrastmcture  on 
getting  required  and  appropriate  information  to  mission  and  mission  support  customers  in  a 
range  of  scenarios  from  peacekeeper  roles  to  the  most  severe  battlefield  conditions.  As 
information  generation  capabihties  become  more  complex,  (e.g.,  maps,  video)  ARL  must 
become  more  involved  in  managing  the  information  space  for  the  user  and  integrate  and 
modernize  its  information  infrastmcture.  Users  need  the  information  services  and  tools 
necessary  to  identify,  retrieve,  fuse,  and  format  information  easily  and  immediately. 

The  underlying  technology  platform  must  be  modernized  to  attain  world-class  stature  and 
integrated  to  support  the  "one  lab"  vision.  ARL’s  base- level  infrastmcture  needs  urgent 
attention.  A  shared  data  environment  to  ensure  semantic  interoperability  and  cross- functional 
integration  must  remain  a  priority.  A  common  operating  environment  throughout  ARL  and  in 
concert  with  AMC  wih  expedite  apphcation  system  implementation  and  ahow  incremental 
implementation.  Infrastmcture  components  must  move  from  an  “organization/technology 
centric”  paradigm  to  an  interconnected  set  of  services/products  with  quantifiable  cost  and 
performance  measures  to  determine  value-added  to  the  mission.  The  cost  of  the  infrastmcture 
must  be  commensurate  to  its  contribution  to  the  mission. 

Management  of  the  end-to-end  infrastructure  must  support  the  goals  of  seamless 
integration  and  modernization.  Today’s  systems  are  too  often  narrowly  focused,  not  fuhy 
interoperable,  and  support  a  single  function  or  organization  requiring  users  to  assemble 
information  from  incompatible  sources.  Breaking  out  of  this  stovepipe  environment  requires 
new  management  mechanisms  that  crosscut  organizational  boundaries.  Common  and  shared 
solutions  wih  reduce  unnecessary  duphcation  and  cut  costs  for  everyone. 

Objective  2.1  Build  An  Infrastructure  Based  on  Architectures  and  Performance 

Strategy  2.1.1  Deploy  a  comprehensive,  uniform  methodology  to  define  and  integrate 
ARL  architectures .  Architectures  provide  the  best,  long-term  definition  of  the  mission 
and  related  IT  support.  An  integrated  architecture  framework  for  operational,  systems, 
and  technical  architectures  must  be  estabhshed  to  ensure  interoperability  and  consistency. 

A  disciplined  support  environment,  similar  to  that  provided  by  “data  modeling”  support 
tools,  would  advance  a  common  understanding  of  missions  and  IT  support  by  enforcing 
rigorous  element  definitions  and  relationships  to  other  elements.  Roles  and 
responsibihties  for  generating,  integrating,  and  using  architectures  in  managing 
information  and  supporting  IT  must  be  institutionahzed.  The  target  is  a  “system  of 
systems”  architecture  that  can  be  expanded  to  include  ah  missions.  Technical 
architectures  should  bridge  the  gaps  between  weapons,  platforms,  and  information 
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systems.  Interoperability  must  be  “built-in”  throughout  the  process,  from  requirements 
generation  through  certification  and  testing,  and  demonstrated  in  “live”  environments  by 
2005. 


Strategy  2.1.2  Build  performance  measures  into  the  infrastructure.  This  strategy  envisions 
having  performance  measures  for  aU  information  related  products  and  services.  When 
complete,  efficiency  and  investment  decisions  can  be  based  on  systematic  assessments  of 
information  cost  and  value  added  to  mission  customers.  Fielding  a  user  oriented 
performance  management  system  to  systematically  capture,  archive,  and  report  performance 
information  is  part  of  this  strategy,  which  wiU  be  in  place  by  2002. 

Objective  2.2  Modernize  and  Integrate  the  ARL  Information  Infrastructure 

Strategy  2.2.1  Improve  base-level  infrastructure.  ARL’s  base  level  communications  and 
computing  infrastmcture  and  data  storage  environment  needs  to  be  reengineered  and 
upgraded.  Inconsistencies  in  technical  and  management  procedures  and  capabilities 
comphcate  IT  change  planning  and  implementation.  A  major  effort  will  be  required  to  put 
in  place  a  consistent  management  stmcture  and  modernized  IT  able  to  deliver  quality 
support  by  2004. 

Strategy  2.2.2  Continue  ARL-wide  applications  implementation.  As  ARL- wide 
applications  (formerly  referred  to  as  migration  systems)  align  applications  support  with 
ARL  functions  and  processes,  future  IT  investments  should  be  linked  directly  to  process 
improvements.  ARL-wide  applications  must  have  plans  to  achieve  acceptable  levels  of 
Joint  Technical  Architecture/Common  Operating  Environment  (JTA/COE)  compliance 
by  2003  or  earfier.  Continued  emphasis  must  be  placed  on  implementing  applications  to 
support  reengineered  processes  that  achieve  mission  and  functional  goals  and  measures 
of  performance.  COTS  software  should  be  used  to  the  maximum  extent  possible. 

Information  support  providers,  in  house  and  contractors,  must  maintain  a  program  of 
continual  improvement  keyed  to  user  requirements,  software  best  practices,  and  the 
software  capability  maturity  models. 

Strategy  2.2.3  Expedite  implementation  of  common  standards.  The  JTA/COE  provides 
the  standards  and  interface  environment  for  interoperabifity  and  a  transparent  technical 
infrastmcture  that  supports  aU  appfications,  to  include  seat  management  for  common 
applications.  Wide  implementation  will  reduce  planning  time  for  appfications  and  enable 
their  timely,  incremental  implementation  in  a  “plug  and  play”  environment.  Infrastmcture 
elements  and  appfications  should  be  JTA/COE  compliant  at  appropriate  levels  by  the  year 
2002  or  earfier. 


Objective  2.3  Introduce  New  Paradigms 

Strategy  2.3.1  Rapidly  insert  advanced  technology  to  support  the  mission.  Technology  is 
changing  faster  than  the  current  infrastmcture  can  adapt.  New  methods  are  needed  to 
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gracefully  introduce  new  technologies  incrementally  with  manageable  risk  rather  than 
requiring  lengthy  contracting  and  development  efforts.  Distributed,  Internet  environments 
must  be  used  to  assess,  test,  integrate,  and  acquire  new  IT  capabilities  and  COTS  products. 

The  target  is  a  systematic  management  stmcture  and  methodology  that  “pipelines”  new 
technologies  linked  to  evolving  mission  needs  and  smoothly  supphes  these  capabihties  to 
the  field  before  the  end  of  2002. 

Objective  2.4  Improve  IT  Management  Tools 

Strategy  2.4.1  Integrate  information  access  and  management  methods  for  all  media  and 
types  of  information .  The  user  needs  automated,  streamlined  methods  to  routinely  and 
reliably  access  information.  A  common  semantics,  syntax,  and  procedures  set  would 
include  electronic  directories,  such  as  the  Government  Information  Locator  Service  (GILS), 
Defense  Data  Dictionary  System  (DDDS),  Defense  Messaging  System  (DMS)  and  directory 
and  search  methodologies  employed  by  WWW  information  providers.  The  target  is  for  on¬ 
line  data  dictionaries  to  be  a  primary  source  for  ARL  user  assistance  when  accessing 
information  (e.g.,  WWW  documents)  by  2002. 

Strategy  2.4.2  Implement  IT  Total  Asset  Visibility  (ITTAV)  universally .  Total  Asset 
Visibihty  is  a  Defense- wide  initiative.  The  ITTAV  concept  can  be  used  to  manage  IT 
“objects”  hke  hardware,  software,  and  data  for  the  user  throughout  their  life  cycle.  ITTAV 
“tracking”  includes  tracking  the  status  of  user  orders  for  IT  objects,  maintaining  accurate 
inventory  records,  automatically  ordering  upgrades,  and  managing  asset  reuse  and  removal. 

The  target  is  a  WWW  based  repository  that  can  be  accessed  by  developers  and  users  to 
determine  availabihty,  rehabihty,  maintainabihty,  etc.,  for  any  information  or  IT  asset 
affecting  their  service  by  2003. 
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World  Class  Infrastructure  Functions 


Goals,  Objectives  &  Strateeies 

Voice  communications 

Video  communications 

Radio,  wireless  and  satellite  communications 

Data  communication 

Desktop  computer  support 

Management  and  business  applications 

Library  and  knowledge  management 

Visual  production  (graphics  and  publications) 

Records  and  document  management 

Information  technology  management 

Information  plans  and  policies 

Facilities  and  space 

People  -  trained  and  productiye 

2 

Provide  services  that  satisfy  customer  information 
needs 

2.1  Bnild  an  Infrastructnre  Based  on 

Architectnres  and  Performance 

o 

• 

• 

• 

• 

2.1.1  Deploy  a  comprehensive,  nniform 
methodology  to  define  and  integrate  ARL 
architectures 

o 

• 

• 

• 

2.1.2  Build  performance  measnres  into  the 
infrastructure 

• 

• 

• 

2.2  Modernize  and  Integrate  the  ARL 
Information  Infrastmcture 

• 

• 

• 

• 

O 

• 

• 

• 

• 

• 

O 

• 

• 

2.2.1  Improve  base-level  infrastmctnre 

o 

e 

2.2.2  Continue  ARL-wide  applications 
implementation 

• 

• 

• 

2.2.3  Expedite  implementation  of  common 
standards 

O 

• 

• 

23  Introdnce  New  Paradigms 

o 

2.3.1  Rapidly  Insert  advanced  technology  to 
snpport  the  mission 

• 

• 

o 

2.4  Improve  IT  Management  Tools 

• 

• 

• 

o 

2.4.1  Integrate  information  access  and 
management  methods  for  all  media  and  types  of 
information 

• 

o 

2.4.2  Implement  IT  total  asset  visibility 
universally 

o 

• 

• 

• 

• 

<o 

o 

Key: 

• 

Major  relationship 

O 

Minor  relationship 

GOAL  3 

Reform  IT  management  processes 
to  increase  efficiency  and  mission 
contribution 


Products/Services 


Performance 


Description:  As  support  resources  decline  in  line  with  the  overall  guidelines  established  by 
QDR  97,  information  and  information  technology  must  be  managed  as  a  strategic  resource.  ARL 
must  base  information  and  information  technology  decisions  on  their  contribution  to  the 
effectiveness  and  efficiency  of  their  mission  and  supporting  business  functions.  It  is  important  to 
manage  IT  resources  and  align  strategies  and  programs  with  ARL/AMC-wide,  functional,  and 
organizational  goals  and  measures.  In  accordance  with  the  Government  Performance  and  Results 
Act  (GPRA),  measures  of  performance  for  IT  must  be  managed  in  the  context  of  functional  and 
organizational  measures  of  performance  to  plan  and  assess  IT’s  contribution  to  the  mission. 
Information  management,  itself  a  business  function,  must  employ  best  business  practices  to 
continuously  improve  customer/user  support,  reduce  infrastmcture  costs,  and  apply  the  best 
available  information  technology. 

To  accomplish  this  goal  successfully,  ARL  must: 

•  fuUy  assess  all  current  IT  processes 

•  identify  processes  which  can  be  improved 

•  perform  comprehensive  reengineering  of  those  processes 

•  prepare  and  disseminate  comprehensive  and  definitive  guidance  for  IT  acquisitions 
(hardware  and  software) 

A  common  basehne  throughout  ARL  would  serve  to  streamline  the  IT  acquisition  process 
and  reduce  overhead  and  lead  time,  leading  to  improved  customer  support  and  reduced  support 
costs.  Improved  acquisition  initiatives  must  fuUy  integrate  aU  ARL  efforts  to  promote  the  “one 
laboratory”  vision. 

The  ARL  basehne  evaluation,  ERP  implementation  and  the  COE  wiU  address  several  of 
these  issues,  such  as  streamhning  the  acquisition  process,  and  providing  a  matrix  to  measure 
performance  of  IT  functions,  as  weU  as  effectiveness  of  business  processes. 

Objective  3.1  Institutionalize  CCA  Provisions 

Strategy  3.1.1  Align  IT  investment  decisions  to  support  improved  mission  processes. 
To  support  strategic  plans  and  improved  processes,  IT  alternatives  must  consider  mission 
impacts  at  the  ARE- wide,  functional,  and  organizational  levels.  IT  investment  criteria 
must  be  apphed  to  develop  IT  portfohos  for  functions  and  organizations  within  the 
context  of  an  overarching  ARE  IT  portfoho  managed  by  the  CIO.  These  criteria  shah  be 
in  place  before  the  end  of  2002. 
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Strategy  3.1.2  Improve  acquisition  processes.  Streamlined  acquisition  regulations  and 
oversight  processes  can  reduce  acquisition  overhead  and  lead-time.  Acquisition  reforms 
should  be  fuUy  implemented  at  aU  levels.  Promising  concepts  and  technologies  from 
research  experiments,  pilot  projects,  and  operational  demonstrations  must  be  moved  through 
the  acquisition  process  smoothly  and  efficiently.  New  paradigms  of  acquisition  must  be 
exploited  that  expedite  the  use  of  COTS  (e.g.,  the  Federal  Acquisition  Regulation  (FAR) 
Section  12,  new  testing  mles  for  COTS),  exploit  commonalities  (e.g.,  product  lines),  and 
provide  insight  into  front-end  processes  (e.g.,  ACTDs)  and  other  initiatives  (e.g..  Global 
Combat  Support  System  (GCSS)).  Selection,  control,  and  evaluation  of  IT  portfohos 
provide  better  links  to  the  mission  and  base  for  improved  management  of  individual  systems 
and  initiatives.  Automated  acquisition  processes  (eBusiness)  shall  be  in  place  before  2004. 

Strategy  3.1.3  Institute  the  customer/user  focus .  Tools  and  pohcy  will  help  activities 
systematically  introduce  and  maintain  customer  awareness  and  compare  their  performance 
with  peers.  In  industry,  customer  focus  is  routinely  practiced  and  supports  continuous 
improvement  of  processes,  practices,  and  people.  Routine  use  of  integrated  customer 
surveys  by  IT  organizations  to  measure  satisfaction  at  all  levels  is  a  key  approach.  These 
surveys  shall  be  implemented  prior  to  2002. 

Objective  3.2  Institute  Fundamental  IT  Management  Reform  Efforts 

Strategy  3.2.1  Improve  IT  processes.  A  comprehensive  reengineering  of  IT  processes 
themselves  will  serve  to  identify  the  optimum  collection  of  information  needed  for  efficient 
rr  management.  Experience  in  the  IT  community  can  be  exported  to  produce 
cost/performance  gains  and  cross-functional  optimization  in  other  areas.  This  strategy 
envisions  a  comprehensive,  time-phased  plan  for  assessing  and  improving  aU  IT  processes, 
including  strategic  planning,  pohcy  and  pohcy  enforcement,  requirements  generation, 
programming  and  budgeting,  acquisition,  and  operations.  These  improvements  shah  be 
implemented  prior  to  2002. 

Strategy  3.2.2  Establish  uniform  organizational  measures  and  assessment  processes. 
Performance  measures  hnked  to  mission  need  to  be  embedded  systematically  at  ah  levels  of 
ARE.  Whhe  the  focus  is  on  organizational  improvement,  both  Capability  Maturity  Models 
(CMM)  and  Baldrige  Criteria,  for  example,  provide  quantitative  assessment  methods  that 
can  be  used  as  performance  indicators.  These  shall  be  in  place  before  2002. 

Strategy  3.2.3  Improve  methods  and  tools.  Tools  have  been  provided  to  assist  activities 
performing  BPR,  benchmarking.  Total  Quahty  Management  (TQM),  architectures  and  other 
improvement  activities.  These  and  other  tools  must  be  integrated  into  the  actual  hfe- cycle, 
so  end-users,  managers  and  developers  can  apply  them  eashy,  routinely,  and  incrementahy, 
and  also  share  results  with  others.  Expansion  is  needed  to  make  the  capabihties  avahable 
via  WWW  or  ARE  Intranet,  and  useful  for  integrating  with  other  AMC/Army  systems, 
including  regular  reporting.  These  shah  be  made  available  by  2003. 


Objective  3.3  Promote  the  Development  of  an  IM/IT  Knowledge -Based  Workforce 
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Strategy  3.3.1  Provide  training  and  educational  opportunities .  Ensure  that  appropriate 
training,  professional  development,  and  rewards  for  the  work  force  of  the  ARE  support 
IM  processes,  policies  and  innovations. 

Strategy  3.3.2  Effectively  utilize  existing  personnel  processes,  collaborate  with  other 
organizations  to  create  new  policies,  and  implement  a  multi-faceted  approach  to 
acquiring,  retaining,  and  maintaining  highly  skilled  personnel  in  the  IM/IT  fields.  Use 
the  recmitment  process  to  acquire  skilled  personnel  based  on  CCA  core  competencies. 

Use  tools  such  as  the  performance  evaluation  process  to  assess  employee  performance  to 
determine  required  training  in  areas  of  deficiency.  (Beginning  in  2003.) 

Strategy  3.3.3  Use  organization  and  individual  assessment  tools  to  determine  skill 
requirements.  Such  tools  can  consist  of  surveys,  studies,  self- assessment,  and  organization 
assessment  tools  (automated  and  non- automated  models).  These  assessment  tools  shah  be 
in  place  by  2004. 


Objective  3.4  Provide  the  IM/IT  Support  Required  to  Ensure  Individuals  with  Disabilities 
Have  Equal  Access  to  the  Information  Environments  and  Opportunities  in  ARE 

Strategy  3.4.1  Execute  the  Computer/Electronic  Accommodations  Program  (CAP). 
Provide  the  hardware,  software,  and  supportive  technologies  and  services  to  make  ARE 
work  environments  and  activities  more  accessible  to  individuals  with  visual,  hearing, 
dexterity,  and  cognitive  impairments  before  2003. 

Objective  3.5  Integrate  ARE  IT  Activities 

Strategy  3.5.1  Provide  tailored  IM  guidance  for  all  missions  and  domains.  Ensure  that 
IM  processes,  policies  and  innovations  are  appropriate  for  different  mission  and  technical 
domains. 

Strategy  3.5.2  Identify  relationships  between  IT  activities  in  different  domains.  Identify 
the  relationships  between  IT  apphed  in  different  domains  to  ensure  that  overarching 
objectives  such  as  interoperabihty,  information  security,  and  efficiency  are  met;  and  mission 
threads,  such  as  sensor- to- shooter,  are  effective.  Dependencies  such  as  those  between  IT 
activities  in  support  missions  (e.g.,  procurement,  personnel)  and  the  common  infrastmcture 
wiU  be  described  and  strategies  for  managing  them  established.  Interoperable  IT  is  integral 
to  the  effectiveness  of  Army  weapon  systems. 
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World  Qass  Infrastructure  Components 

Goals,  Objectives  &  Strategies 

Voice  communications 

Video  communications 

Radio,  wireless  and  satellite 

communications 

Data  communication 

Desktop  computer  support 

Management  and  business 

applications 

Library  and  knowledge 

management 

Visual  production  (graphics 

and  publications) 

Records  and  document 

management 

Information  technology 

management 

Information  plans  and 
policies 

Facilities  and  space 

People  -  trained  and 
productive 

3 

Reform  IT  Management  Processes  to  Increase 
Efficiency  and  Mission  Contribution 

3.1  Institutionalize  CCA  Provisions 

o 

o 

m 

3.1.1  Align  IT  investment  decisions  to 
support  improved  mission  processes 

o 

• 

o 

3.1.2  Improve  acquisition  processes 

o 

3.13  Institute  tbe  customer/user  focus 

* 

32  Institute  Fundamental  IT  Management 
Reform  Efforts 

• 

O 

• 

• 

33.1  Improve  IT  process 

o 

33.2  Establish  uniform  organizational 
measmes  and  assessment  processes 

• 

• 

333  Improve  methods  and  tools 

o 

• 

o 

33  Promote  the  Development  of  an  riM 
Knowledge-Based  Workforce 

• 

• 

o 

o 

• 

33.1  Provide  training  and  educational 
opportimities 

• 

o 

• 

333  Effectively  utilize  existing  persoimel 
processes,  collaborate  witb  other  organizations 
to  create  new  policies,  and  implement  a  multi¬ 
faceted  approach  to  acquiring,  retaining,  and 
maintaining  highly  skilled  persoimel  in  the 
IM/TT  fields 

- 

• 

o 

o 

• 

333  Use  organization  and  individual 
assessment  tools  to  determine  skill 
requirements 

- 

- 

3.4  Provide  the  EM/IT  Support  Required  to 
Ensure  Individuals  with  Disabilities  Have 
Equal  Access  to  the  Information  Enviromnents 
and  Opportimities  in  ARE 

- 

O 

- 

• 

• 

• 

- 

- 

3.4.1  Execute  the  Computer/Electronic 
Accoimnodations  Pn^ram  (CAP) 

• 

• 

• 

• 

• 

• 

• 

• 

33  Integrate  ARE  IT  Activities 

• 

• 

3.5.1  Provide  tailored  IM  guidance  for  all 
missions  and  domains 

o 

• 

3.53  Identify  relationships  between  IT 
activities  in  different  domains 

• 

• 

o 

Kev: 

Major  relationship 

c> 

Minor  relationship 

GOAL  4 

Ensure  AMC/DoD’s  vital  information 
resources  are  secure  and  protected 


Description:  The  capability  of  ARL  to  carry  out  its  mission  from  peacetime  through  conflict  is 
highly  dependent  upon  information  systems  and  networks  throughout  AMC  and  DoD.  In  today's 
environment  of  sophisticated  weaponry  and  rapid  global  force  projection  requirements,  the 
abihty  to  provide  timely  accurate  information  is  vital  to  all  aspects  of  operations.  Indeed, 
Information  and  Decision  Superiority  is  at  the  very  foundation  of  our  vision  of  modem  warfare, 
and  Information  Assurance  (lA)  is  essential  to  achieve  and  maintain  information  superiority.  lA 
is  integral  to  JV2010  and  the  abihty  to  integrate  intehigence,  command  and  control,  and 
battlefield  awareness  functions  into  joint  and  combined  operations.  lA  is  an  essential  element  to 
implementing  protection  of  critical  national  infrasfructures  mandated  by  the  Presidential 
Decision  Directive  -  63,  Critical  Infrasfructure  Protection. 

A  robust  lA  program  requires: 

•  concept  of  operations; 

•  continuous  monitoring  and  assessment  of  threats,  vulnerabihties,  and  readiness 
posture; 

•  appropriate  architecture,  technology,  tools,  and  material; 

•  sufficient  numbers  of  adequately  educated  and  weU- trained  personnel; 

•  effective  operational  pohcies  and  doctrine; 

•  appropriate  management  and  oversight;  and 

•  the  abihty  to  quickly  and  efficiently  implement  agency- wide  security  measures  and 
countermeasures  to  limit  damage  when  threatened. 

ARL  wih  assess  existing  network  protective  measures  to  ensure  there  are  no  network 
vulnerabihties  that  could  potentiahy  threaten  the  integrity  of  the  system  or  data.  An  Information 
Assurance  Plan  must  be  established  and  implemented  throughout  ARL  by  2002.  ARL  must  also 
use  a  common,  integrated  Pubhc  Key  Infrastmcture  (PKI)  to  enable  security  services  at  multiple 
levels  of  assurance.  The  PKI  implementation  is  in  accordance  with  DoD  plans  and  pohcies 
regarding  the  PKI  Roadmap,  PKI  Implementation  Plan,  and  the  PKI  Certificate  Pohcy. 

Objective  4.1  Make  lA  an  Integral  Part  of  ARL  Mission  Readiness  Criteria 

Strategy  4.1.1  Designate  all  IT  functions  as  mission  critical,  mission  essential,  or 
mission  support.  ARL  defense  infrastmcture  owners  (e.g.,  command  and  control, 
logistics  and  transportation,  health  affairs,  intehigence,  personnel,  financial  services) 
need  to  identify  those  mission  functions  and  information  system  elements  of  their 
infrastmctures  that  perform  mission  critical,  mission  essential,  or  mission  support 
functions  by  2002. 
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Strategy  4.1.2  Provide  information  assurance  levels  consistent  with  the  ARUs  mission 
critical,  mission  essential,  and  mission  support  requirements  for  all  networks.  Detailed 
assurance  criteria  for  each  level  and  interconnection  between  levels  must  be  developed 
and  specified  by  2003. 

Strategy  4.1.3  Integrate  lA  readiness  standards  and  metrics  into  the  ARL  readiness 
reporting  process.  ARL  lA  policy  must  address  the  accountabihty  aspects  of  lA.  It  must 
drive  the  availabihty  of  resources  required  by  operational  directors  and  others 
accountable  for  their  information,  and  thus  ARL’s  lA  posture  by  2004. 

Objective  4.2  Enhance  ARL  Personnel  lA  Awareness  and  Capabilities 

Strategy  4.2.1  Train  and  certify  ARL  network  managers,  operators,  systems 
administrators,  and  all  other  personnel  involved  in  the  operation  and  management  of 
the  network  and  its  component  systems.  Training  and  certification  must  extend  into  the 
contractor  community  supporting  ARL.  Eighty  percent  of  personnel  in  this  category 
shall  be  certified  by  2005. 

Strategy  4.2.2  Review  and  enhance  (as  needed)  military  and  civilian  career  fields  to 
ensure  that  they  reflect  adequate  recognition  of  network  information  assurance  skills 
and  capabilities.  Career  field  designation  is  essential  to  establishing  ascension  paths  for 
the  military  and  civihan  disciplines  critical  to  ensuring  efficient  secure  operation  of  the 
network.  This  review  shall  be  completed  by  2003  and  a  recognition  program  in  place  by 
2004. 

Objective  4.3  Enhance  ARL  LA  Operational  Capabilities 

Strategy  4.3.1  Protect  the  network  with  a  defined  and  controlled  perimeter.  While  ARL 
depends  upon  unclassified  connections  to  the  Internet  to  accomphsh  unclassified  basic 
support  functions  and  to  provide  access  to  open  source  information,  these  connections 
must  be  controlled  and  capable  of  being  monitored.  Interconnection  of  aU  classified 
systems  with  any  other  system  will  be  accomplished  by  high  assurance  means. 

Authentication  must  be  broadly  employed  as  soon  as  possible  but  not  later  than  2002. 

Strategy  4.3.2  Protect  the  network  with  an  integrated  attack  sensing  and  response 
management  capability.  As  part  of  the  integrated  capabihty,  all  ARL  Components  of  the 
network  and  all  access  points  into  the  network  must  have  intmsion  detection  capabihties 
as  soon  as  possible  but  not  later  than  2002. 

Strategy  4.3.3  All  ARL  Components  of  the  network  must  adhere  to  established  lA 
architecture,  connection  standards  and  procedures.  AU  network  elements  must  provide 
the  required  levels  of  security  configuration  management,  employ  methods  to  detect 
unauthorized  activity  and  maUcious  code,  and  have  adequate  provisions  for  continuity  of 
operations  and  rapid  reconstitution  immediately  prior  to  the  end  of  2001. 

Strategy  4.3.4  Implement  “Defense  in  Depth”  concepts  across  ARL.  This  concept  wiU 
be  appUed  to  each  operating  assurance  level  and  shall  be  applied  in  accordance  with  DoD 
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criteria,  including  existing  protective  measures  traditionally  used  to  safeguard  national 
security  information.  This  strategy  implemented  by  2003  will  consist  of  the  following: 

•  Hardened  network  infrastmcture. 

•  Protected  host  secure  operating  systems. 

•  Protected  enclave  boundaries. 

•  User/Application  layer  security  services,  including  non-repudiation,  signature, 
integrity,  and  confidentiahty. 

•  Employment  of  strong  identification  and  authentication  (I&A)  services. 

•  Use  of  a  common,  integrated  ARE  Public  Key  Infrastmcture  (PKI)  to  enable 
security  services  at  multiple  levels  of  assurance. 

•  lA  situational  awareness  based  on  both  network  and  host  monitoring  to  formulate 
and  support  an  attack  sensing  and  response  management  capability. 

•  Approved  high  assurance  devices  and  configurations  for  all  interconnections 
among  mission  sensitivity  levels. 


Objective  4.4  Establish  an  Integrated  ARE  Security  Management  Infrastructure  (SMI) 


Strategy  4.4.1  Integrate  a  broad  spectrum  of  network  services  (e.g.,  audit,  intrusion 
detection,  operational  network  monitoring  and  control)  into  the  ARL  SMI.  Confidence 
in  the  secure  operation  of  the  network  must  be  grounded  in  a  real-time  understanding  of 
network-wide  activities.  Eurther,  the  abihty  to  identify  when  network  users  have  gained 
access  to  unauthorized  areas  or  information  or  to  be  able  to  attribute  specific  network 
activity  to  specific  users  of  the  network  is  an  important  factor  in  deahng  with  the  insider 
threat.  Implement  the  ARE  PKI  consistent  with  the  May  6,  1999  DoD  pohcy 
memorandum,  DoD  PKI  Roadmap,  DoD  PKI  Implementation  Plan,  and  the  DoD  PKI 
Certificate  Pohcy.  This  capabihty  shah  be  implemented  not  later  than  2003. 
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World  Class  Infrastructure  Components 

Goals,  Objectives  &  Strategies 

Voice  communications 

Video  communications 

Radio,  wireless  and  satellite 

communications 

Data  communication 

Desktop  computer  support 

Management  and  business 

applications 

Eibrary  and  knowledge 

management 

Visual  production  (graphics  and 

publications) 

Records  and  document  management 

Information  technology 
management 

Information  plans  and  policies 

Facilities  and  space 

People  -  trained  and  productive 

4 

Ensure  AMCTDA/DoD's  Vital  Information  Resource 
are  Secure  and  Protected 

4.1  Make  lA  and  Integral  Part  of  ARE  Mission 
Readiness  Criteria 

• 

o 

o 

4.1.1  Designate  all  IT  functions  as  mission  critical, 
mission  essential,  or  mission  support 

• 

o 

4.1.2  Provide  information  assurance  levels  consistent 
with  the  ARL's  mission  critical,  mission  essential,  and 
mission  support  requirements  for  all  networks 

- 

- 

4.13  Integrate  lA  readiness  standards  and  metrics 
into  the  ARE  readiness  reporting  process 

o 

4.2  Enhance  ARE  Personnel  lA  Awareness  and 
Capabilities 

• 

o 

o 

4.2.1  Train  and  certify  ARE  network  managers, 
operators,  systems  administrators,  and  all  other 
personnel  involved  in  the  operation  and  management  of 
the  network  and  its  component  systems 

o 

o 

4.23  Review  and  enhance  (as  needed)  civilian  career 
fields  to  ensure  they  reflect  adequate  recognition  of 
network  information  assurance  skills  and  capabilities. 

o 

43  Enhance  ARE  lA  Operational  Capabilities 

o 

• 

o 

• 

• 

• 

• 

o 

• 

• 

• 

• 

43.1  Protect  the  network  with  a  defined  and 
controlled  perimeter 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

• 

4.3.2  Protect  the  network  with  an  integrated  attack 
sensing  and  response  man^ement  capability 

o 

o 

o 

o 

o 

o 

o 

o 

o 

o 

• 

• 

4.33  All  ARE  components  of  the  network  must 
adhere  to  established  lA  architecture,  connection 
standards  and  procedures 

• 

o 

• 

o 

• 

• 

• 

• 

• 

o 

43.4  Implement  "Defense  in  Depth"  concepts  across 
ARE 

o 

o 

o 

o 

• 

o 

4.4  Establish  an  Integrated  ARE  Security  Management 
Infrastructure  (SMI) 

• 

• 

• 

4.4.1  Integrate  a  hroad  spectrum  of  network  services 
(e.g.  audit,  intrusion  detection,  operational  network 
monitoring  and  control)  into  tiie  ARE  SMI 

o 

Key: 

Maior  relationship 

O 

Minor  relationship 

— f - 

GOALS 

- Analysis 

^4 - Resources 

Showcase  knowledge  management 

research  and  potential. 

Description:  Knowledge  management  is  the  leveraging  of  collective  wisdom  to  increase 
responsiveness  and  innovation.  To  support  this  goal,  ARL  must  estabhsh  knowledge 
management  pohcy,  provide  guidance  and  oversight,  and  leverage  technology,  fostering 
information  superiority  for  the  war  fighter,  while  maintaining  and  strengthening  national 
security. 

Providing  information  accessibihty,  accuracy,  and  reliabihty  for  the  Army  Research  Labs 
promotes  the  “one  laboratory”  approach.  This  information  must  be  responsive  to  business  needs, 
and  safe  from  compromise.  It  is  also  the  basis  for  ARL’s  support  to  higher- level  command. 

There  are  three  main  initiatives  ARL  must  employ  to  support  this  goal: 

1 .  Build  a  framework  to  determine  the  value  of  information. 

2.  Facihtate  flexible  access  to  the  best  sources  of  information  and  services  for  the 
customers. 

3.  Facihtate  the  creation,  capture,  sharing  and  management  of  imphcit  and  tacit 
organizational  knowledge.  Identify,  centrahze,  and  organize  access  to  the 
numerous  knowledge  sources  available  and  critical  to  the  enterprise. 

ARL’s  responsibihty  in  this  arena  encompasses  three  levels  of  expertise: 

1 .  Estabhsh  KM  within  ARL 

2.  Act  as  KM  Center  of  expertise  for  AMC,  DA  and  an  asset  to  all  of  DOD 

3.  Identify  and  undertake  necessary  KM  research  and  development 

Knowledge  Management,  as  it  apphes  to  the  war  fighter,  is  the  means  to  assist  in 
understanding  the  battle  space,  while  depriving  the  enemy  of  information  for  their  understanding 
of  the  battle  space. 

ARL  should  ensure  that  appropriate  training,  professional  development,  and  rewards  for 
the  work  force  support  IM  processes,  policies  and  innovations  deployed  throughout  the 
organization. 

Objective  5.1  Move  Toward  an  Information  Mari^etplace 

Strategy  5.1.1  Build  a  framework  to  determine  the  value  of  information.  Our  mihtary 
capabhities  are  heavily  dependent  on  focused  information.  The  value  of  information  is  a 
primary  discriminator  in  business  decisions  and  information  assurance  protection 
strategies  that  focus  on  priority  targets.  This  strategy  requires  developing  and  applying 
knowledge  management  methods  and  tools  for  helping  a  customer  determine  the  value  of 
information  to  their  missions  and  tasks  (and  the  risks  of  not  having  the  information).  This 
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methodology,  if  successful,  can  help  reduce  the  “glut”  of  information  and  enable  ARL  to 
treat  information  itself  as  a  commodity.  This  framework  shall  be  in  place  prior  to  the  end 
of  2001. 


Strategy  5.1.2  Facilitate  flexible  access  to  the  best  sources  of  information  and  services 
for  customers.  The  customer  should  have  a  fuU  spectmm  of  interoperable  quahty 
information  resources  and  services  to  choose  from,  at  affordable  prices  --a  menu  of 
mission/task- related  products,  services  and  related  cost/performance.  The  interface  to 
the  customer  wiU  have  many  of  the  characteristics  of  an  information  marketplace  such  as 
quality/cost  comparison  information,  flexibihty,  choice  of  suppher,  customer  feedback, 
and  ubiquitous  help.  This  strategy  envisions  new  approaches  to  manage  information 
resources  that  use  market  concepts  to  get  customers  the  products  and  services  on  time  and 
at  an  affordable  cost.  It  envisions  increased  use  of  performance  contracts,  partnering 
agreements,  fee- for- service,  and  devolution  of  purchasing  of  IT  to  lowest  levels.  This 
strategy  shall  be  in  place  prior  to  the  end  of  2003. 

Strategy  5.1.3  Facilitate  the  creation,  capture,  sharing  and  management  of  implicit 
and  tacit  organizational  knowledge.  Identify,  centralize,  and  organize  access  to  the 
numerous  knowledge  sources  available  and  critical  to  the  enterprise.  Information 
technology  and  information  services  are  essential  but  insufficient  to  achieve  information 
superiority  alone.  Knowledge  management  offers  the  potential  to  significantly  leverage 
the  value  of  our  information  technology  investments.  The  implementation  of  knowledge 
management  methods  and  tools  will  facihtate  collaborative  knowledge  creation  and 
sharing  and  will,  in  turn,  optimize  the  effectiveness  of  strategic  and  tactical  decisions. 

The  target  is  an  agile,  responsive,  learning  organization  in  which  knowledge  needed  to 
provide  critical  mission  support  is  available  where  and  when  needed.  This  capabihty 
must  be  implemented  not  later  than  2004. 

Objective  5.2  Provide  Information  Superiority  to  the  War  Fighter 

Strategy  5.2.1  Facilitate  the  means  for  the  war  fighter  to  capture  the  knowledge 
necessary  to  understand  the  battle  space.  Through  advanced  R&D  efforts,  equip  the  war 
fighter  with  superior  technology  to  capture  the  information  necessary  to  facihtate  the 
understanding  of  the  battle  space.  This  can  be  achieved  through  the  use  of  sensors  and 
advanced  C4ISR  capabilities. 

Strategy  5.2.2  Create  advanced  systems  to  deprive  the  enemy  of  vital  information.  The 
R&D  efforts  of  ARL  must  also  focus  on  the  means  to  deprive  the  enemy  of  gaining  an 
understanding  of  the  battle  space.  This  can  be  achieved  by  developing  more 
technologically  advanced  weapon  systems,  and  the  use  of  RF  jamming  capabihties  and 
sensors  to  detect  intmsions. 
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Goals,  Objectives  &  Strategies 

Voice  communications 

Video  communications 

Radio,  wireless  and  satellite  communications 

Data  communication 

Desktop  computer  support 

Management  and  business  applications 

Library  and  knowledge  management 
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Information  technology  management 

Information  plans  and  policies 

Facilities  and  space 

People  -  trained  and  productive 

5 

Showcase  Knowledge  Management  Research  and 
Potential 

5.1  Move  Toward  an  Information  Marketplace 

o 

o 

o 

o 

o 

• 

• 

• 

o 

• 

5.1.1  Build  a  framework  to  determine  the  value 

of  information 

• 

• 

• 

o 

• 

5.1.2  Facilitate  flexible  access  to  the  best  sources 

of  information  and  services  for  customers 

o 

o 

o 

o 

o 

• 

• 

- 

o 

5.1.3  Facilitate  the  creation,  capture,  sharing 
and  management  of  implicit  and  tacit 
organizational  knowledge.  Identify,  centralize, 
and  organize  access  to  the  numerous  knowledge 
sources  available  and  critical  to  the  enterprise 

• 

• 

• 

• 

5.2  Provide  Information  Superiority  to  the  War 
Fighter 

o 

o 

o 

o 

• 

• 

5.2.1  Facilitate  the  means  for  the  war  fighter  to 
capture  the  knowledge  necessary  to  uderstand  the 
battle  space 

o 

o 

o 

o 

• 

• 

5.2.2  Create  advanced  systems  to  deprive  the 
enemy  of  vital  information 

o 

o 

o 

o 

• 

• 

Key: 

• 

Major  relationship 

<o 

Minor  relationship 

GOAL  6 

^  o  ^ 

Use  information  sharing  as  a  vehicle  to 

accomplish  the  "one  ARL”  vision. 

Description:  This  last  goal  is  strongly  tied  to  goals  1-5.  The  need  for  information  sharing  not 
only  applies  to  ARL  internally,  but  also  the  sharing  of  information  with  mission  partners,  across 
AMC,  and  throughout  DA  and  DoD. 

To  accomplish  this  goal,  the  following  initiatives  must  be  in  place: 

1 .  Implement  needed  security  measures  in  order  to  protect  personal  information 
within  data  warehouse  by  FY  2002. 

2.  Implement  document  management  and  make  all  ARL  documents  accessible  to 
appropriate  persons  by  FY  2003. 

3.  F*rovide  access  to  all  financial,  human  and  physical  assets  by  appropriate 
persons  by  FY  2004. 

This  goal  also  reinforces  the  need  to  have  a  common  FT  baseline  throughout  ARL.  This 
common  baseline  will  increase  the  efficiency  of  information  sharing,  promote  the  integrity  of  the 
information,  and  allow  for  easier  processing  of  the  shared  information. 

Implementation  of  ARL  enterprise  resource  planning  (ERP)  will  provide  the  vehicle  for 
information  sharing,  leading  to  the  “one  ARL”  vision.  The  ERP  will  provide  for  document 
management,  access  to  financial,  human,  and  physical  assets  by  appropriate  persons,  and  be  the 
basis  for  knowledge  management  across  ARL.  Once  fuUy  implemented,  ARL  will  be  a  leader  in 
attaining  the  vision  of  the  DoD,  DA,  and  AMC  strategies  for  achieving  Information  and  Decision 
Superiority. 

Objective  6.1  Implement  needed  security  measures  in  order  to  protect  personal 
information  within  data  warehouse. 

Strategy  6.1.1  The  individual’s  right  to  privacy  must  be  protected  in  Federal 

Government  information  activities  involving  personal  inf ormation  from  the  initiation 

of  the  project. 


Strategy  6.1.2  Ensure  only  those  with  a  need  to  know  are  allowed  access.  Command 
group,  supervisors  and  personnel  managers  should  have  access  to  employee  information. 
Supervisors’  access  should  be  limited  to  employees  under  their  direct  supervision. 
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Personal  employee  data  must  be  maintained  on  a  server  behind  a  firewall,  with  only 
intranet  access.  Intmsion  detection  must  be  deployed  to  protect  the  information  from 
unauthorized  access.  This  must  be  in  place  prior  to  deployment  of  products. 


Objective  6.2  Implement  document  management  and  make  all  ARL  documents  accessible 
to  appropriate  persons 

Strategy  6.2.1  The  open  and  efficient  exchange  of  scientific  and  technical  government 
information,  subject  to  applicable  national  security  controls  and  the  proprietary  rights 
of  others,  fosters  excellence  in  scientific  research  and  effective  use  of  Federal  research 
and  development  funds  is  fundamental. 

Strategy  6.2.2  Expedite  shared  data  environment  implementation .  Sharing  data  is  key  to 
interoperabihty  and  quahty  data.  Requirements  are  exploding  for  rehable,  secure,  efficient 
shared  information  repositories  to  support  ARL  apphcations  data  and  World  Wide  Web 
(WWW)  information.  Core  mission  critical  data  items  must  be  logically  organized  and 
shared  under  the  control  of  data  “stewards”  who  are  responsible  for  their  quality  and  use. 

The  target  is  an  accessible  set  of  repositories  with  information  required  to  support  ARL 
operations.  Private  facilities  and  sources  should  be  assessed  when  considering  alternatives. 

This  shall  be  initiated  prior  to  the  end  of  2002. 

Objective  6.3  Provide  access  to  all  financial,  human,  and  physical  assets  by  appropriate 
persons. 

Strategy  6.3.1  Employ  safeguards  to  ensure  electronic  information  dissemination  is 
appropriate  at  all  levels.  Pubhc  access  to  financial,  human,  and  physical  assets  of  ARL 
must  be  legally  screened  to  avoid  dissemination  of  restricted  information  under  the 
Privacy  Act,  or  information,  which  in  the  wrong  hands,  could  cause  security  imphcations 
to  ARL.  The  following  are  guidelines  to  follow  that  must  be  in  place  prior  to 
implementation  of  any  product: 

(a)  Ensure  that  information  is  protected  commensurate  with  the  risk  and 
magnitude  of  the  harm  that  would  result  from  the  loss,  misuse,  or  unauthorized 
access  to  or  modification  of  such  information; 

(b)  Limit  the  collection  of  information  that  identifies  individuals  to  that  which  is 
legally  authorized  and  necessary  for  the  proper  performance  of  agency  functions; 

(c)  limit  the  sharing  of  information  that  identifies  individuals  or  contains 
proprietary  information  to  that  which  is  legally  authorized,  and  impose 
appropriate  conditions  on  use  where  a  continuing  obhgation  to  ensure  the 
confidentiality  of  the  information  exists; 

(d)  Provide  individuals,  upon  request,  access  to  records  about  them  maintained  in 
Privacy  Act  systems  of  records,  and  permit  them  to  amend  such  records  as  are  in 
error  consistent  with  the  provisions  of  the  Privacy  Act. 
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World  Class  Infrastructure  Components 

Goals,  Objectives  &  Strateaies 

Voice  communications 

Video  communications 

Radio,  wireless  and  satellite  communications 

Data  communication 

Desktop  computer  support 

Management  and  business  applications 

Library  and  knowledge  management 

Visual  production  (graphics  and 
publications) 

Records  and  document  management 

Information  technology  management 

Information  plans  and  policies 

Facilities  and  space 

People  -  trained  and  productive 

6 

Use  Information  Sharing  as  a  Vehicle  to 
Accomplish  the  "One  ARL"  Vision 

6.1  Implement  Needed  Security  Measures  in 
Order  to  Protect  Information  Within  Data 

Warehouse 

O 

o 

o 

O 

o 

O 

O 

• 

• 

o 

6.1.1  The  individual's  right  to  privacy  must  be 
protected  in  Federal  Government  information 
activities  involving  personal  information 

o 

o 

o 

o 

o 

o 

o 

• 

• 

6.1.2  Ensure  only  those  with  a  need  to  know  are 
allowed  access 

o 

o 

<o 

o 

• 

• 

o 

6.2  Implement  Document  Management  and  Make 
All  ARL  Documents  Accessible  to  Appropriate 
Persons 

o 

o 

o 

o 

o 

• 

• 

• 

• 

6.2.1  The  open  and  efficient  exchange  of 
scientific  and  technical  government  information, 
subject  to  applicable  national  security  controls 
and  the  proprietary  rights  of  others,  fosters 
excellence  in  scientific  research  and  effective  use 

of  Federal  rese 

o 

o 

o 

o 

o 

- 

- 

• 

- 

6.2.2  Expedite  shared  data  environment 
implementation 

• 

• 

• 

6.3  Provide  Access  to  All  Financial,  Hrrmarr,  and 
Physical  Assets  by  Appropriate  Persorrs 

• 

• 

• 

• 

6.3.1  Employ  safeguards  to  ensure  electronic 
information  dissemination  is  appropriate  at  all 
levels 

• 

- 

• 

• 

Key: 

• 

Major  relatiorrship 

<o 

Minor  relatiorrship 

5  Relationships  to  Other  Policies  &  Guidance 


The  driving  force  for  the  ARL  Strategic  Information  Management  Plan  is  Joint  Vision 
2010,  recently  reinforced  by  JV2020,  which  is  the  Chairman  of  the  Joint  Chiefs  of  Staff  strategic 
vision  for  future  warfare.  It  is  now  permeating  aU  facets  of  DoD  doctrine.  The  overall 
improvements  in  technology  must  be  integrated  into  Joint  Forces  command,  control,  and 
intelhgence.  Increased  access  to  information  and  improvements  in  the  speed  and  accuracy  of 
prioritizing  and  transferring  data  will  be  of  the  utmost  importance  to  the  war  fighter.  “Vie  must 
have  information  superiority:  the  capability  to  collect,  process,  and  disseminate  an 
uninterrupted  flow  of  information  while  exploiting  or  denying  an  adversary’s  ability  to  do  the 
same.  ’’ 


Army  Vision  2010  -  Information  Superiority  defines  the  concepts,  enablers,  and 
technologies  available  to  assist  the  war  fighter  in  understanding  the  battle  space,  and 
simultaneously  depriving  the  enemy  of  information  for  their  understanding  of  the  battle  space.  A 
system  of  systems  that  will  enable  our  forces  to  locate  the  target,  provide  responsive  command 
and  control,  generate  the  desired  effect,  assess  the  level  of  success,  and  reengage  when  required 
will  provide  for  precision  engagement,  one  of  the  four  principles  defining  Joint  Vision  2010. 

The  Army  vision  is  to  create  an  Objective  Force.  "The  Objective  Force  will  meet  the  challenges 
of  the  2F‘  century  by  providing  the  Nation  with  an  Army  that  is  responsive,  deployable,  agile, 
versatile,  lethal,  survivable,  and  sustainable.  ”  Objective  Force  units  will  feature  networked 
command,  control,  communications,  computers,  inteUigence,  surveillance,  and  reconnaissance 
(C4ISR)  capabihties,  along  with  weapons  systems  capable  of  accurate,  long-range  fires  and  the 
ability  to  employ  joint  fires.  The  research  and  development  efforts  of  ARL  to  provide  the  Army 
and  DoD  with  technologically  advanced  weapon  systems  include  the  design  of  improved 
sensors,  propulsion  systems,  weapons  and  materials,  and  sensors  and  electron  devices.  ARL  is 
continuously  striving  to  create  better  wireless  networks  to  support  the  soldier  in  the  field  while 
maintaining  the  integrity  of  the  information. 

The  ARL  Strategic  Information  Plan  acts  to  fink  to  the  September  1999  AMC 
Information  Technology  Strategic  Plan  with  the  October  1999  DoD  Information  Management 
Strategic  Plan,  yielding  an  even  stronger  and  more  responsive  document. 

The  corporate  mission  of  ARL  is  to  execute  fundamental  and  applied  research  to  provide 
the  Army  the  key  technologies  and  the  analytical  support  necessary  to  assure  supremacy  in  future 
land  warfare.  The  mission  of  the  ARL  CIO  is  to  estabhsh  knowledge  management  pohcy, 
provide  guidance  and  oversight,  and  leverage  technology,  which  foster  information  superiority 
for  the  war  fighter  and  maintain  and  strengthen  national  security.  The  C4ISR  capabihties  of  the 
Objective  Force  is  directly  tied  to  knowledge  management  -  the  gathering  of  raw  data  from 
several  sources,  organizing  that  data  into  useful  information,  having  the  information  readily 
accessible  via  network  capabihties,  at  the  same  time  ensuring  the  security  of  that  network  so  as 
to  maintain  the  integrity  of  the  data  to  the  soldier  in  the  field. 

Implementation  and  execution  of  the  ARL  Strategic  Information  Plan  wih  require 
sustained  cooperation,  accountabihty,  and  refinements.  This  plan  is  critical  to  the  way  ARL  wih 
conduct  business  in  the  future,  both  intemahy  and  with  mission  partners.  We  must  train  the  way 
we  wih  fight  if  we  are  to  be  successful.  ARL  has  the  opportunity  to  make  a  long-range 
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difference  to  the  soldier  in  the  field  in  conducting  Information  Warfare  by  means  of  Knowledge 
Management  and  Information  Assurance. 

Appendix  A  provides  a  hyper  finked  fist  of  policies  and  guidance  that  were  instmmental 
in  shaping  this  strategic  information  plan  and  should  be  consulted  to  fiifiy  understand  the  lineage 
of  the  issues  presented  herein. 
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6  Roles  and  Responsibilities 


6.1  Authority  for  the  CIO  Function 

The  Clinger-Cohen  Act  of  1996  directed  each  Executive  Agency,  e.g.  Military 
Departments,  to  designate  a  Chief  Information  Officer  (CIO)  responsible  for  all  aspects  of 
information  resource  management,  information  technology,  and  National  Security  Systems 
(NSS).  The  Secretary  of  the  Army  designated  DISC4  as  the  Army  CIO,  and  the  Vice  DISC4  as 
the  Deputy  CIO. 

In  accordance  with  the  Clinger-Cohen  Act  a  CIO  is  not  required  below  Department  of  the 
Army.  However,  DA  did  release  a  pohcy  as  a  foUow-up  to  their  CIO  Implementation  Plan 
stating,  “subordinate  organizations  may,  at  their  discretion,  designate  a  CIO  and  establish 
supporting  offices  within  their  organization”.  As  outlined  in  0MB  M-96-20,  dated  February  26, 

1997,  “while  the  organizational  placement  of  the  CIO  is  to  be  determined  by  the  agency  head, 
the  person  selected  should  report  to  the  agency  head  directly,  and  not  through  another  official”. 

The  Army  Materiel  Command’s  IT  Strategic  Plan,  section  2.1.2,  requires  aU  of  it’s  MSCs  to 
have  a  CIO.  “Creating  a  CIO  in  subordinate  organizations  provides  the  leadership  a  means  to 
develop  plans  and  establish  procedures  for  the  improved  design,  use,  sharing,  performance, 
evaluation,  and  modernization  of  information  resources.  All  CIOs  have  a  technical  relationship 
with  AMC  CIO  concerning  current  and  desired  relationships  among  business  operations  and 
IT.” 

6.2  Responsibilities  of  the  CIO 

The  responsibihties  of  the  CIO  as  outhned  in  the  Clinger-Cohen  Act  are  as  follows: 

•  Business  Process  Analysis/Improvement 

o  Analyze  the  missions  of  the  executive  agency  and,  based  on  the 
analysis,  revise  the  executive  agency’s  mission- related  processes  and 
administrative  processes  before  making  significant  IT  investments  in 
support  of  those  missions 

o  Promote  the  effective  and  efficient  design  and  operation  of  all  major 
information  resource  management  processes 

Links:  Army  Business  Process  Improvement  Website 

•  Capital  IT  Investment  Control 

o  Before  making  an  investment  in  a  new  information  system,  determine 
whether  the  function  to  be  supported  should  be  performed  by  the 
private  sector  or  by  the  executive  agency 
o  Design  and  implement  a  process  for  maximizing  the  value  and 
assessing  and  managing  the  risks  of  the  IT  acquisitions 
o  Provide  for  the  selection,  management,  and  evaluation  of  the  results  of 
rr  investments 
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o  Be  integrated  with  the  proeesses  for  making  budget,  financial,  and 
program  management  decisions 

o  Include  minimum  criteria  to  be  apphed  in  considering  whether  to 
undertake  a  particular  IT  investment,  and  specific  criteria  for 
comparing  and  prioritizing  alternative  information  systems  investment 
projects 

o  Advise  the  Director  of  ARL  regarding  whether  to  continue,  modify,  or 
terminate  a  program  or  project 

Links;  GSA  -  Capital  Planning  Homepage 

GAO  -  rr  Investment  Evaluation  Guide 

0MB  -  Evaluating  IT  Investments 


•  IT  Acquisition  Oversight 

o  Monitor  the  performance  of  IT  programs 
o  Evaluate  the  performance  of  those  programs 
o  Advise  the  Director  regarding  whether  to  continue,  modify,  or 
terminate  a  program  or  project 

Links;  CIO  and  DoD  Assessment  Criteria 

CIO  and  DoD  Program  Assessment  Requirements  Letter 


•  IT  Architecture 

o  Develop,  maintain,  and  facihtate  the  implementation  of  a  sound  and 
integrated  information  technology  architecture 

Links;  Army  Architecture  Directorate  Development  Site  (requires  MS  IE) 


•  Information  Assurance 

o  Ensure  the  information  security  pohcies,  procedures,  and  practices  are 
adequate 

I  .inks:  AMC  Information  Assurance  Plan 


•  Information  Resources  Management 

o  Ensure  IT  is  acquired  and  information  resources  are  managed  in  a 
manner  that  implements  the  pohcies  and  procedures  of  Division  E, 
Clinger- Cohen  Act  and  Chapter  35  of  Title  44,  United  States  Code 

Links;  CIO,  Department  of  Defense  (requires  MS  IE) 


•  Performance  Management 


34 


o  Ensure  performance  measurements  are  prescribed  for  IT  used  by  the 
executive  agency 

o  The  performance  measurements  measure  how  weU  the  IT  supports 
programs 

o  Quantitatively  benchmark  ARE  process  performance  in  terms  of  cost, 
speed,  productivity,  and  quahty  of  outputs  and  outcomes 

links;  Performance  Based  Measurement  -  Guides 

Army  Management  Control  Evaluations  (requires  MS  IE) 

•  Professional  Development  and  Training 

o  Assess  requirements  estabhshed  for  agency  personnel  regarding 
knowledge  and  skill  in  IRM,  and  adequacy  of  such  requirements  for 
facihtating  achievement  of  the  IRM  performance  goals 
o  Assess  the  extent  to  which  the  executive  and  management  levels  of  the 
agency  meet  the  IRM  knowledge  and  skills  requirements 
o  Develop  strategies  and  specific  plans  for  hiring,  training,  and 
professional  development  in  the  areas  of  IRM  and  IT. 

links;  Business  Process  Reengineering  Training 

•  Strategic  and  Capital  Planning 

o  Estabhsh  effective  and  efficient  capital  planning  processes  for 

selecting,  managing,  and  evaluating  the  results  of  major  investments  in 

rr 

o  Design  and  implement  a  process  for  maximizing  the  value  and 

assessment  and  managing  the  risks  of  the  IT  acquisitions  of  the  agency 

links:  DoD  IM  Strategic  Plan,  19  Oct.  1999 

AMC  IT  Strategic  Plan 

GSA  Capital  Planning  Homepage 

Additional  CIO  responsibilities  include : 

•  Electronic  Commerce 

DoD  EB/EC  Strategic  Plan 

•  Digitization 

Army  Digitization  Office 

•  Pubhshing 

Army  PubUshing  Agency 

•  Records  Management 

Office  of  the  Deputy  Chief  of  Staff  for  Personnel 

•  Requirements  Vahdation 

AR  79-1,  Materiel  Requirements  (HQ,  AMC) 

TRADOC  Pamphlet  71-9,  Eorce  Development  Requirements 

Link;  CIO  Additional  Responsibihties 
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6.3  Organization 


To  fulfill  the  responsibilities  of  the  CIO,  ARL  has  reahgned  it’s  organizational  structure, 
creating  the  Computational  and  Information  Sciences  Directorate  (CISD).  The  Director  of  CISD 
is  dual- hatted  as  the  CIO.  The  Office  of  the  CIO  oversees  corporate  IT  issues  and  is  supported 
by  CISD.  The  mission  of  the  CISD  is  to  provide  fuU  spectmm  scientific  and  business 
computing,  computational  research,  communications,  and  network  services  as  a  critical  enabler 
to  the  ARL,  Army,  and  the  DoD  science  and  technology  (S&T)  mission.  In  this  way,  the  Office 
of  the  CIO  can  be  kept  to  a  small  staff  while  the  CISD  organization  acts  to  support  a  wider  base 
of  mission  related  activities. 

The  Office  of  the  CIO  is  directly  responsible  for  the  following: 

•  Develop  and  enforce  information  pohcies,  plans  and  standards  for  ARL  which 
wiU  ensure  the  effective  and  efficient  accomphshment  of  the  following 
functions: 

o  Business  process  analysis  and  improvement 
o  Capital  IT  investment  control 
o  rr  acquisition  oversight 
o  rr  architecture 
o  Information  assurance 
o  Information  resources  management 
o  Performance  management 
o  Professional  development  and  training 
o  Strategic  and  capital  planning 
o  Electronic  commerce 
o  Digitization 
o  Pubhstring 

o  Document  and  records  management 
o  Requirements  vahdation 

In  addition  the  following  are  the  exphcit  mission  areas  of  CISD  in  support  of  the  CIO  function: 

•  Perform  R  &  D  in  computer  and  computational  science  and  engineering 

•  Design,  implement,  and  manage  the  state-of-the-art  technological 
infrastmcture  for  ARL  that  meets  the  computational  needs  in  support  of  S  &  T 
research  activities  and  management  and  business  operations 

•  Operate  and  manage  the  DoD  Major  Shared  Resource  Center  (MSRC)  for 
High  Performance  Computing  (HPC) 

•  Battlefield  information  gathering  and  dissemination 

•  Manage  the  Army  HPC  Research  Center 

•  The  KM  Center  to  include  managing  ARL  technical  information  and  hbrary 
resources,  along  with  the  intranet,  extranet  and  internet. 

The  directorate  has  responsibihty  and  direct  oversight  for  the  design,  development  and 
implementation  of  the  following  IT  areas:  implementing  plans  and  pohcies  for  corporate- wide 
information  technologies  and  automated  data  processing  (ADP)  acquisitions;  automated 
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corporate  enterprise  systems;  networking  and  telecommunications;  management  and  exeeution 
of  one  of  four  DoD  Major  Shared  Resouree  Centers  (MSRCs)  for  high  performance  eomputing 
(HPC)  to  inelude  researeh  initiatives  in  scientific  visuahzation  and  the  eomputational  scienees; 
and  the  corporate  knowledge  management  center. 

One  element  of  CISD,  the  Knowledge  Management  Center,  provides  researeh  and 
exploratory  development  in  Knowledge  Management  and  advaneed  enterprise  software  systems 
for  defense,  and  the  applieation  of  this  researeh  to  ereate  enterprise- wide  solutions  within  ARL. 

HQ,  and  AMC  have  appointed  ARL  the  Exeeutive  Agent  (EA)  for  Knowledge  Management. 
Knowledge  Management  is  a  key  link  for  Information  Superiority;  the  eoncepts,  enablers,  and 
teehnologies  available  to  assist  the  war  fighter  in  understanding  the  battle  space,  and 
simultaneously  depriving  the  enemy  of  information  for  their  understanding  of  the  battle  spaee. 

“We  must  have  information  superiority:  the  capability  to  collect,  process,  and  disseminate  an 
uninterrupted  flow  of  information  while  exploiting  or  denying  an  adversary’s  ability  to  do  the 
same.  ”  (Chairman,  Joint  Chiefs  of  Staff) 

The  Information  Teehnology  Division  (ETD)  is  responsible  for  keeping  ARE's 
information  systems,  database,  and  computing  network  infrastmcture  and  associated  services  up- 
to-date  and  operational.  ARD  consists  of  the  Offiee  of  the  Chief  and  the  three  branehes: 

Networking  and  Telecommunieations  Braneh,  Systems  and  Operations  Braneh,  and  Computing 
Support  Branch.  Personnel  are  loeated  at  the  two  main  ARE  sites  AEC,  APG  and  at  White  Sands 
Missile  Range  (WSMR).  ARD  provides  management  and  service  oversight  and  support  of  ARE's 
non-S&T  related  databases,  its  loeal  and  wide  area  eomputing  and  eommunieations  networks, 
ARE's  eorporate  Unix  servers  and  ARE- wide  personal  computer  (PC)  assets.  This  ineludes 
serving  as  primary  teehnieal  souree  for  the  aequisition,  support,  and  dissemination  of 
teehnologies  that  pertains  to  loeal  area  and  distributed  computing  and  telecommunications 
networks,  maintaining  network  and  systems  seeurity,  and  providing  the  interfaee  of  ARE  loeal 
networks  with  DoD  aeeredited  wide  area  networks.  ARD  also  has  to  assure  that  ARE's  business 
and  resouree  management  databases  and  tools  seamlessly  interfaee  with  the  Army  information 
management  infrastmcture  and  conform  with  Army  wide  used  information  technology  and 
management  proeedures,  standards,  and  praetiees. 

The  single  ARE  Eibrary  System  operates  at  ARE's  two  main  campuses,  ARE- APG  and 
ARE- AEC.  Each  location  has  a  chentele  with  distinct  technical  information  needs  and  reports 
direetiy  to  the  CIO/Direetor,  CISD.  The  library  is  responsible  for  providing  teehnieal  information 
and  associated  services  to  ARE  personnel,  as  well  as  to  persons  of  other  organizations  which 
have  a  current  support  agreement  with  ARE. 

The  High  Performance  Computing  Division  (HPCD)  manages  the  DoD  Major  Shared 
Resource  Center  at  ARE,  unclassified  as  well  as  elassified,  and  eonduets  aU  the  funetions 
required  of  a  central  high  performance  computing  site  and  network  hub.  This  ineludes  planning, 
eontraet  administration,  and  oversight  of  hardware,  firmware,  and  software  resouree  and 
maintenanee  management,  performanee  monitoring,  regulatory  conformance,  and  maintenance 
of  standards. 

HPCD  provides  the  ARE,  Army,  and  DoD  RDT&E  with  the  computational  capabihty 
required  for  eondueting  modehng,  simulations,  and  analysis  on  the  network  of  the  DoD  Major 
Shared  Resource  Centers  and  other  Government  high  performanee  computing  centers.  This 
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includes  computational  methods  capable  of  fuUy  exploiting  scaleable  massively  parallel 
processors;  automated  problem- adaptive  grid  generation;  and  novel  methods,  algorithms,  and 
display  technologies  in  support  of  scientific  and  engineering  information  processing  and 
representation. 

The  oversight  of  the  operation  of  the  Army  High  Performance  Computing  Research 
Center  is  also  the  responsibility  of  HPCD.  They  coordinate  and  integrate  its  technology 
development  with  Army  R&D  requirements. 
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7  Budgetary  Methodology 


The  Climer-Cohen  Act,  Division  E,  Sec.  5122  thru  Sec  5124,  places  the  government’s 
technology  decisions  in  a  tme  business  context.  For  the  first  time,  aU  major  technology 
decisions  are  being  analyzed  for  the  return  on  investment  and  the  competitive  edge  they  provide. 
As  such,  goals  are  set  throughout  aU  IT  programs,  particularly  in  the  cost- performance  tradeoff 
process.  AU  programs  wiU  use  performance  based  metrics  to  provide  the  analysis,  control 
mechanism,  horizontal  integration,  and  feedback  that  aUows  ARE  to  wisely  use  IT  funds  and 
know  the  tme  value  of  its  IT  investments. 

rr  investments  involve  aU  funds  used  for  IT  and  information  resources  including 
computers,  ancUlary  equipment,  software,  firmware,  services,  and  related  resources.  IT  consists 
of  any  equipment  or  interconnected  system  or  subsystem  of  equipment  that  is  used  in  the 
automatic  acquisition,  storage,  manipulation,  management,  movement,  control,  display, 
switching,  interchange,  transmission  or  reception  of  data  or  information.  The  term  “information 
resources”  means  information  and  related  resources,  such  as  personnel,  IT,  and  funds.  An 
“information  system”  is  a  discrete  set  of  information  resources  organized  for  the  coUection, 
processing,  maintenance,  use,  sharing,  dissemination  or  disposition  of  data. 

7.1  The  ARL  IT  Investment  Process 

The  current  budget  process  at  ARE  includes  IT  within  the  program/project  budget 
submissions.  This  process  does  align  IT  investment  decisions  to  support  mission  processes  in 
support  of  Goal  3  of  the  ARE  Strategic  IT  Plan,  Reform  IT  management  processes  to  increase 
efficiency  and  mission  contribution.  The  respective  directorate  purchases  acquisition  requests 
for  IT  under  $2,500  with  an  IMP  AC  card  (issued  credit  card).  These  acquisitions  generally  do 
not  go  through  the  OCIO.  Acquisition  requests  for  IT,  $2,500  to  $100K,  are  processed  using  an 
internal  ARE  automated  program  called  “Buy-IT”.  A  Mission  Needs  Statement  (MNS)  must  be 
included  with  the  acquisition  request.  Acquisition  requests  for  IT  over  $100K  are  done  as  a 
manual  process.  Again,  a  MNS  must  accompany  the  request.  Approval  authority  for  IT 
acquisitions  greater  than  $2,500  is  under  the  direction  of  the  CIO. 

7.2  Process  Improvement 

To  improve  upon  this  current  process,  ARE  must  first  institute  a  Common  Operating 
Environment  (COE)  throughout  ARE.  This  would  serve  to  streamhne  the  IT  acquisition  process 
and  reduce  overhead  and  lead-time. 

Further  improvement  to  the  IT  acquisition  process  would  be  for  ARE  to  automate 
requests  under  $2,500  and  over  $100K.  Either  expanding  the  “Buy-IT”  program  could  do  this, 
or  creating  another  automated  process  preferably  using  a  COTS  package  already  available. 

Again,  this  would  assist  in  streamlining  the  acquisition  process.  An  ERP  could  include  a 
purchasing  module.  That  module  would  automate  all  IT  purchases,  as  well  as  tracking  the  asset 
to  the  person  responsible  for  the  acquisition.  AU  IT  acquisition  requests  must  be  approved  by  the 
OCIO. 
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7.3  Performance  and  Program  Measurement 

Performance- based  management  links  investment  planning  with  the  systematic  use  of 
select  feedback  to  manage  projects  and  processes.  Projects  cannot  be  managed  unless  they  are 
measured.  The  measurement  process  includes  translating  business  strategies  into  actions  at  the 
operational  level.  Successful  performance- based  management  depends  upon  the  effective  use  of 
performance  measures. 

The  key  is  to  establish  program/project  performance  measures  that  will  be  used  to 
determine  program/project  success  and  the  ability  to  track  program/project  progress.  These 
measures  shall  address: 

>  Program/Project  Success  -  achievement  of  performance  measures  that  are  hnked  to 
strategic  goals  and  objectives 

>  Schedule  and  Progress  -  completion  of  program/project  milestones,  significant 
events,  and  individual  work  items 

>  Growth  and  Stabihty  -  stabihty  of  required  fiinctionahty  or  capabihty  and  the  volume 
dehvered  to  provide  required  capability 

>  Funding  and  Personnel  Resources  -  the  balance  between  work  to  be  performed  and 
resources  assigned  and  used 

>  Technical  Adequacy  -  use  of  approved  standard  elements,  and  comphance  with  the 
DoD  Joint  Technical  Architecture  (JTA) 

An  essential  part  to  this  is  Configuration  Mana^ment  (CM).  The  configuration 
management  effort  includes  identifying,  documenting,  and  verifying  the  functional  and  physical 
characteristics  of  a  configuration  item;  recording  the  configuration  of  an  item;  and  controlling 
changes  to  an  item  and  its  documentation.  It  will  provide  a  complete  audit  trail  of  decisions  and 
design  modifications. 
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8  Strategic  Roadmap 


The  six  goals  outlined  in  the  beginning  of  this  document  must  be  achieved  for  ARL  to 
reahze  the  ARL  Corporate  vision  of  “one  laboratory”,  and  the  ARL  CIO  vision  of  “information 
and  decision  superiority”.  This  strategic  roadmap  is  the  direction  for  ARL  to  follow  to  make  the 
vision  a  reahty. 

The  first  thing  ARL  must  focus  on  is  business  process  reengineering;  how  to  create  a 
common  approach  to  current  business  processes  used  throughout  the  organization.  ARL  wiU 
head  in  this  direction  with  the  Enterprise  Resource  Planning  (ERP)  Project.  The  ERP  system  can 
integrate  most  of  the  common  business  functions  in  ARE,  i.e.  financial,  project  management, 
balanced  scorecard,  and  human  resources.  An  ERP  system  can  utilize  the  concepts  developed  in 
the  ARE  Knowledge  Management  project  that  provide  a  portal  to  the  business  intelhgence 
aspects  of  finance  and  project  management.  When  an  ERP  system  is  fuUy  implemented, 
combined  with  the  implementation  of  the  Common  Operating  Environment  (COE),  several  steps 
toward  achieving  the  vision  wiU  have  been  met,  as  well  as  some  of  the  requirements  outhned  in 
the  GPRA  and  the  Cfinger- Cohen  Act  (CCA). 

The  roadmap  for  ARE  to  foUow  involves  a  classic  Plan,  Do,  Check,  Act  (PDCA) 
approach  where: 

•  Plan  -  The  ARE  Strategic  Information  Plan 

•  Do  -  Annual  Performance  Plan  detailing  tasks  that  must  be  completed  to 
attain  the  goals,  objectives  and  strategies  outlined  in  the  plan.  This  plan 
should  be  completed  in  time  for  the  annual  budget  review  so  that  funds  can  be 
identified  to  accomplish  the  tasks  identified. 

•  Check  -  Annual  Performance  Plan  Evaluation  to  annually  assess  the  metrics 
and  accomphshments  toward  achieving  the  Strategic  Information  Plan  and 
identify  adjustments  required.  This  assessment  must  be  completed  prior  to 
preparation  of  the  following  year’s  Annual  Performance  Plan. 

•  Act  -  Implement  the  changes  identified  in  a  new  Annual  Performance  Plan 
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9  Appendix  A 
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10  Appendix  B 
Definitions  of  Terms 


Defense  in  Depth  Concept  -  DoD  has  developed  a  "defense- in-depth"  strategy  which  includes 
tools  to  assess  the  robustness  and  security- readiness  of  networks,  technically  quahfied  groups 
who  simulate  cyber  attacks  against  information  systems,  networks  and  infrastmctures  to  identify 
security  vulnerabihties  and  help  develop  protections  against  future  attacks,  and  a  pilot  program 
for  authenticating  digital  signatures  for  efectronic  transactions  using  commercial  technology 


Information  Assurance  -  represents  measures  to  protect  friendly  information  systems  by 
preserving  the  availabihty,  integrity,  and  confidentiahty  of  the  systems  and  the  information 
contained  within  the  systems 


Information  Superiority  -  the  capabihty  to  collect,  process,  and  disseminate  an  uninterrupted 
flow  of  information  while  exploiting  or  denying  an  adversary’s  abihty  to  do  the  same 


Interoperability  -  having  a  systems  nature;  connecting  numerous  components  to  produce  a 
unified  good 


Knowledge  Management  -  leveraging  of  collective  wisdom  to  increase  responsiveness  and 
innovation 
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